On Facebook developer blog, it was told that, if you explicitly set the redirect_uri param, you won't get the #_=_ appended to the callback uri. But this is not the case. You still get those characters even on setting redirect_url field. But that won't have any effect on your flow.